The following Fedora EPEL 7 Security updates need testing:
Age URL
13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-01679b76db
chromium-88.0.4324.150-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-3cc28d5469
php-horde-Horde-Text-Filter-2.3.7-1.el7
5
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-bb1731457c
prosody-0.11.8-1.el7
4
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-f93d3d26db
privoxy-3.0.31-1.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-389d1fe8e6
libmysofa-1.2-4.el7
3
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-4dda69dcf1
rubygem-rack-cors-1.0.6-1.el7
The following builds have been pushed to Fedora EPEL 7 updates-testing
ansible-2.9.18-1.el7
drbd-9.16.0-3.el7
netdata-1.29.2-1.el7
Details about builds:
================================================================================
ansible-2.9.18-1.el7 (FEDORA-EPEL-2021-9ec8ceb857)
SSH-based configuration management, deployment, and task execution system
--------------------------------------------------------------------------------
Update Information:
Update to security and bugfix release 2.9.18.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 20 2021 Kevin Fenzi <kevin(a)scrye.com> - 2.9.18-1
- Update to 2.9.18.
- Fixes: CVE-2021-20228 CVE-2021-20178 CVE-2021-20180 CVE-2021-20191
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1917287 - CVE-2021-20178 ansible: user data leak in snmp_facts module
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917287
[ 2 ] Bug #1917330 - CVE-2021-20178 ansible: user data leak in snmp_facts module
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917330
[ 3 ] Bug #1917463 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917463
[ 4 ] Bug #1917465 - CVE-2021-20180 ansible: ansible-collection:
bitbucket_pipeline_variable exposes secured values [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917465
[ 5 ] Bug #1917473 - CVE-2021-20191 ansible: multiple collections exposes secured values
[fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917473
[ 6 ] Bug #1917474 - CVE-2021-20191 ansible: multiple collections exposes secured values
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1917474
--------------------------------------------------------------------------------
================================================================================
drbd-9.16.0-3.el7 (FEDORA-EPEL-2021-d53779ad1c)
DRBD user-land tools and scripts
--------------------------------------------------------------------------------
Update Information:
Upstream release of 9.16.0
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 21 2021 Peter Hanecak <hany(a)hany.sk> - 9.16.0-1
- Upstream release of 9.16.0
* Tue Jan 26 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.15.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1926718 - drbd-9.16.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1926718
--------------------------------------------------------------------------------
================================================================================
netdata-1.29.2-1.el7 (FEDORA-EPEL-2021-5f6bbecb42)
Real-time performance monitoring
--------------------------------------------------------------------------------
Update Information:
Update from upstream
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 19 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.29.2-1
- Update from upstream
* Thu Feb 11 2021 Didier Fabert <didier.fabert(a)gmail.com> 1.29.1-1
- Update from upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1927059 - netdata-1.29.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1927059
--------------------------------------------------------------------------------